FG-601E-BDL-950-12

FG-601E-BDL-950-12 FortiGate-601E Hardware plus 1 Year FortiCare Premium and FortiGuard Unified Threat Protection (UTP) short description

Description

FortiGate‑601E BDL‑950‑12 is a mid‑range next‑generation firewall bundle combining powerful hardware with one year of FortiCare support and FortiGuard Unified Threat Protection (UTP). The hardware delivers up to 36 Gbps firewall throughput, 10 Gbps IPS, and 7 Gbps threat protection, while offering a rich port mix (2 × 10 GE SFP+, 8 × GE SFP, 8 × RJ45) and dual 240 GB SSDs for logging and analytics. The UTP package includes critical security modules like IPS, antivirus, web/video filtering, application control, antispam, and sandboxing—ensuring full threat defense for one year.

Features & Advantages

FortiGate 601E Hardware Highlights

• Next-Generation Firewall (NGFW): Offers deep packet inspection, application control, and intrusion prevention.
• Secure SD-WAN: Integrated SD-WAN capabilities for optimized and secure WAN connectivity.
• High Performance: Powered by Fortinet’s custom SPU processors for ultra-fast threat protection and SSL inspection.
• Interface Options: Includes multiple GE RJ45, GE SFP, and 10 GE SFP+ slots for flexible deployment.
• AI/ML-Powered Security: Uses artificial intelligence and machine learning for advanced threat detection and prevention

FortiGuard Unified Threat Protection (UTP)

• Comprehensive Threat Intelligence: Protects against malware, ransomware, zero-day threats, and advanced persistent threats.
• Real-Time SSL Inspection: Supports TLS 1.3 for full visibility into encrypted traffic.
• Web and Content Filtering: Blocks malicious websites and inappropriate content.
• Application Control: Identifies and controls applications to reduce risk and improve bandwidth usage

FortiCare Premium Support

• 24×7 Technical Support: Access to Fortinet experts around the clock.
• Advanced Hardware Replacement: Fast turnaround for faulty units.
• Firmware Updates: Regular updates to ensure optimal performance and security.
• Priority Services: Accelerated response times and priority case handling

Security

• Protects against known exploits, malware and malicious websites using continuous threat intelligence provided by FortiGuard Labs security services
• Identify thousands of applications including cloud applications for deep inspection into network traffic
• Protects against unknown attacks using dynamic analysis and provides automated mitigation to stop targeted attacks

Security & Unified Threat Protection (UTP) Features

The bundle includes FortiGuard UTP, which brings a set of security services:

• Intrusion Prevention System (IPS)
• Antivirus / Anti‑Malware
• Web & Video Filtering
• Application Control
• Antispam
• Content Disarm & Reconstruct, Botnet IP/Domain protection, Sandbox for dynamic / unknown threats

Performance

• Delivers industry’s best threat protection performance and ultra-low latency using purpose-built security processor (SPU) technology
• Provides industry-leading performance and protection for SSL encrypted traffic

Certification

• Independently tested and validated best security effectiveness and performance
• Received unparalleled third-party certifications from NSS Labs, ICSA, Virus Bulletin and AV Comparatives

Networking

• Delivers extensive routing, switching, wireless controller and high performance IPsec VPN capabilities to consolidate networking and security functionality
• Enables flexible deployment such as Next Generation Firewall and Secure SD-WAN

Management

• Single Pane of Glass with Network Operations Center (NOC) view provides 360° visibility to identify issues quickly and intuitively
• Predefined compliance checklist analyzes the deployment and highlights best practices to improve overall security posture

Management, Resiliency, and Operational Features

• Hardware accelerated via Fortinet’s ASICs (SPU NP6, CP9) to maintain performance under deep inspection workloads.
• High availability support: Active‑Active, Active‑Passive, clustering.
• Virtual Domains support (multi‑tenant / segmentation) up to 10 VDOMs.
• Large scale VPN support (both site‑to‑site & client‑to‑gateway) i.e., thousands of tunnels.
• Management of many FortiSwitches / FortiAPs etc

Security Fabric

• Enables Fortinet and Fabric-ready partners’ products to collaboratively integrate and provide end-to-end security across the entire attack surface
• Automatically builds Network Topology visualizations which discover IoT devices and provide complete visibility into Fortinet and Fabric-ready partner products

Next Generation Firewall (NGFW)

• Combines threat prevention security capabilities into single high performance network security appliance
• Reduces complexity by creating campus topology view and providing granular visibility of devices, users and threat information
• Identify and stop threats with powerful intrusion prevention beyond port and protocol that examines the actual content of your network traffic
• Delivers industry’s highest SSL inspection performance using industry-mandated ciphers
• Proactively detect malicious unknown threats using integrated cloud-based sandbox service

Secure SD-WAN

• Secure direct Internet access for Cloud applications for improved latency and reduce WAN cost spending
• Effective, cost-efficient and high performance threat prevention capabilities
• WAN Path Controller and Link Health Monitoring for better application performance
• Security Processor powered industry’s best IPsec VPN and SSL Inspection performance
• Centralized Management and Zero-Touch deployment

Use Cases & Suitability

• The FG‑601E is well suited for medium to large enterprise networks, especially in environments that demand high throughput, SSL inspection, and many concurrent sessions.

• The 1‑year bundle gives you full support and updates (FortiCare and FortiGuard) for UTP features, but after that you’d need to renew.

• Because of its hardware capabilities (SPU / ASIC acceleration), it’s optimized to offload certain security operations to maintain throughput.

• Well suited where SSL inspection, IPS / threat prevention, and VPN termination at scale are needed.